https://bugzilla.redhat.com/show_bug.cgi?id=1898907
--- Comment #19 from Przemyslaw Roguski <proguski(a)redhat.com> ---
Statement:
OpenShift Container Platform (OCP) delivers jenkins package with bundled
XStream library. Due to JEP-200 Jenkins project [1] and advisory SECURITY-383
[2], OCP jenkins package is not affected by this flaw.
[1]
https://github.com/jenkinsci/jep/blob/master/jep/200/README.adoc
[2]
https://www.jenkins.io/security/advisory/2017-02-01/ (see SECURITY-383 /
CVE-2017-2608)
--
You are receiving this mail because:
You are on the CC list for the bug.